PT-2017-2028 · Citrix · Citrix Netscaler Gateway

Published 2017-04-13 · Updated 2017-07-11 · CVE-2017-7219

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Gateway versions 10.1 through 10.1 before 135.8/135.12 Citrix NetScaler Gateway versions 10.5 through 10.5 before 65.11 Citrix NetScaler Gateway versions 11.0 through 11.0 before 70.12 Citrix NetScaler Gateway versions 11.1 through 11.1 before 52.13

Description A heap overflow issue allows a remote authenticated attacker to execute arbitrary commands via unspecified vectors. The vulnerability is caused by a buffer overflow in the system's software, potentially enabling a remote attacker to exploit it.

Recommendations For versions 10.1 before 135.8/135.12, update to version 135.8/135.12 or later. For versions 10.5 before 65.11, update to version 65.11 or later. For versions 11.0 before 70.12, update to version 70.12 or later. For versions 11.1 before 52.13, update to version 52.13 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-01195

CVE-2017-7219

Affected Products

Citrix Netscaler Gateway

References · 7

• 🔥 https://blog.scrt.ch/2017/04/26/heap-overflow-vulnerability-in-citrix-netscaler-gateway-cve-2017-7219 · Exploit
• https://osv.dev/vulnerability/CVE-2017-7219 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7219 · Security Note
• https://bdu.fstec.ru/vul/2017-01195 · Security Note
• http://securityfocus.com/bid/97626 · Vendor Advisory
• https://support.citrix.com/article/CTX222657 · Vendor Advisory
• http://securitytracker.com/id/1038283 · Note